ed1c150417809fc543d9c76a0c188c10_JaffaCakes118

General

Target

ed1c150417809fc543d9c76a0c188c10_JaffaCakes118
Size

92KB
MD5

ed1c150417809fc543d9c76a0c188c10
SHA1

e344c479f5048d2097e21bf20508daea10dc4d0c
SHA256

bcb17afbe86af3cecca26895528cddccd84db5f84e81f45bdcc54de8cbeb8eb7
SHA512

9d6630805b592af1fc5069faad82b3015f35b86a14b3efe913ee6cb21ca8d395bfaf6e5dd372a83990862920b65175c14e7aef86933e618c6d05ca3249852013
SSDEEP

1536:Q83e9btz0DRwG7m+0XOPffculrRFXDgShVQ9MX9CwAHhcm+kZm+p:DWpz0DyGajOTlrRGi90/m+p

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ed1c150417809fc543d9c76a0c188c10_JaffaCakes118

Files

ed1c150417809fc543d9c76a0c188c10_JaffaCakes118
.exe windows:4 windows x86 arch:x86

614b8902b3e3e4c37a2ed1f8cc385e38

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CloseHandle
CreateNamedPipeW
ExitProcess
GetACP
GetCommandLineA
GetModuleHandleA
GetStartupInfoA
GetVersionExA
HeapAlloc
HeapCreate
ResetEvent
RtlUnwind
SizeofResource
Sleep
WinExec
lstrcpynW

user32

TrackPopupMenu
UpdateWindow
LoadMenuA
GetCapture
FrameRect
DrawIconEx
ClientToScreen
TrackPopupMenuEx

comctl32

ImageList_AddMasked
InitializeFlatSB
ImageList_Write
DrawStatusTextA
FlatSB_EnableScrollBar
FlatSB_SetScrollRange
GetMUILanguage
ImageList_SetFlags
ImageList_DragShowNolock

ole32

CoGetMalloc
CoTaskMemAlloc
CoTaskMemFree
CreateAntiMoniker
StringFromGUID2
CoFileTimeNow
CoCreateInstance
CoCreateGuid
CLSIDFromString
CoBuildVersion

dbghelp

SymLoadModule64
SymGetOptions
SymGetLinePrev64
SymGetModuleBase64
ImageNtHeader
ImageDirectoryEntryToData
FindExecutableImage

oleaut32

SysReAllocString
SafeArrayAllocDescriptor
SafeArrayAccessData
RevokeActiveObject
OleLoadPicturePath

Sections

.text
Size: 52KB - Virtual size: 51KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 28KB - Virtual size: 27KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

614b8902b3e3e4c37a2ed1f8cc385e38

Headers

File Characteristics

Imports

kernel32

user32

comctl32

ole32

dbghelp

oleaut32

Sections

.text Size: 52KB - Virtual size: 51KB

.data Size: 28KB - Virtual size: 27KB

.rsrc Size: 4KB - Virtual size: 3KB

.reloc Size: 4KB - Virtual size: 3KB

.text
Size: 52KB - Virtual size: 51KB

.data
Size: 28KB - Virtual size: 27KB

.rsrc
Size: 4KB - Virtual size: 3KB

.reloc
Size: 4KB - Virtual size: 3KB